Troubleshoot Incident Errors
Applies To: ThreatSync
Some of the features described in this topic are only available to participants in the ThreatSync Beta program. If a feature described in this topic is not available in your version of WatchGuard Cloud, it is a beta-only feature.
Incident errors occur when ThreatSync could not perform a specified action, and include:
- Device isolation failed
- File deletion failed
- Kill process failed
- Block connections to access point failed
- The malicious access point might be no longer active.
- There are no available access points with a dedicated scanning radio to perform remediation actions on the malicious access point.
- Malicious access point might use WPA3 security or WPA2 security with Protected Management Frames, or operate on a channel not in the current country of operation of your access points.
View Incident Error Details
On the Incidents page, incidents with remediation errors show with a red exclamation point icon. To view details of the error, point to the icon.
To troubleshoot an incident error:
- Select Monitor > Threats > Incidents.
The Incidents page opens. - Click the incident with an error.
The Incident Details page opens. - In the Threat Details section, review the error message.
- To try to remediate the incident again, click an action.